JTAG forensics is an advanced acquisition procedure that uses test access ports standardized by the JTAG association. These ports, among other things, can be utilized to access raw data stored in the connected device. The acquisition process involves using existing solder points on the device's circuit board. By using specialized equipment and a matching device-specific JTAG cable, one can retrieve the flash memory contents (less the eMMC overprovisioned area, but including addressable unallocated space) from compatible devices. Notably, JTAG acquisition is often available even for locked, damaged, or otherwise inaccessible devices. JTAG acquisition is available for many Android devices, as well as some feature phones and Windows Phone 7 and 8 devices. JTAG is not available for recent BlackBerry 10 devices. It is not available for any Apple device either.
JTAG operates on a lower level compared to physical acquisition. This has its advantages and disadvantanges.
The following are the...